Privacy Policy

1. Who are we?

Upshift BV is a web design agency based in Antwerp, Belgium (VAT number: BE0729.775.243). We are responsible for processing your personal data as described in this policy.

Questions or comments about this privacy policy? Send an email to hello@upshift.be.

2. What data do we collect?

We only process data that you provide to us or that is automatically generated when you visit our website.

• Contact form: name, email address, and the content of your message.
• Analytics data (Ahrefs Web Analytics): aggregated visitor statistics such as page views, traffic source, browser, device type, language, country, city, link clicks, and form submissions.
• Technical data: IP address, browser type, and page path. These are processed by our hosting partner Netlify to keep the website running.

3. Why do we process your data?

• Answering your enquiry: when you submit the contact form, we process your data based on your consent (Art. 6.1.a GDPR) and our legitimate interest (Art. 6.1.f GDPR).
• Website improvement: analytics data is used to understand how visitors use the site. For this we use Ahrefs Web Analytics without cookies or persistent identifiers.
• Technical operation: hosting the website requires processing certain technical data based on legitimate interest.

4. How long do we retain your data?

We retain contact form messages for up to 2 years after the last communication, or shorter if the matter is closed. Analytics data is retained according to Ahrefs Web Analytics settings and retention periods. Netlify technical log data is retained for a maximum of 30 days.

5. Who do we share your data with?

We never sell your data. We may use processors:

• Netlify, Inc. — website hosting (US, Standard Contractual Clauses apply).
• Ahrefs Pte. Ltd. — Ahrefs Web Analytics for aggregated visitor statistics.

6. Your rights

Under the GDPR you have the following rights:

Send a request to hello@upshift.be. We respond within 30 days. If you have complaints, you can contact the Data Protection Authority (DPA) via gegevensbeschermingsautoriteit.be.

• Access: you can request which data we hold about you.
• Rectification: you can have incorrect data corrected.
• Erasure: you can ask us to delete your data.
• Restriction: in certain cases you can request that processing be restricted.
• Objection: you can object to processing based on legitimate interest.
• Portability: you can request your data in a readable format.

7. Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. Our website is served exclusively over HTTPS.

8. Changes

This privacy policy may be updated. The date at the top of the page indicates when the latest version was published. For significant changes we will inform you via the website.

9. Tracking

More information about how this website measures usage can be found in our tracking policy.